REMARKS 

[0001] Applicant respectfully requests entry of the following remarks and 
reconsideration of the subject application. Applicant respectfully requests entry of 
the amendments herein. The remarks and amendments should be entered under 
37 CFR. § 1.116 as they place the application in better form for appeal, or for 
resolution on the merits. 

[0002] Applicant respectfully requests reconsideration and allowance of all 
of the claims of the application. Claims 1, 3-5, and 7-37 are presently pending. 
Claims amended herein are: 1, 9, 20, 35. Claims withdrawn or cancelled herein 
are: 2 and 6. New claims added herein are: none. 

Formal Request for an Interview 

[0003] If the Examiner's reply to this communication is anything other than 
allowance of all pending claims, then I formally request an interview with the 
Examiner. I encourage the Examiner to call me— the undersigned representative 
for the Applicant— so that we can discuss this matter so as to resolve any 
outstanding issues quickly and efficiently over the phone. 

[0004] Please contact me or my assistant to schedule a date and time for a 

telephone interview that is most convenient for both of us. While email works 
great for us, I welcome your call to either of us as well. Our contact information 
may be found on the last page of this response. 
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Claim Amendments 

[0005] Without conceding the propriety of the rejections herein and in the 
interest of expediting prosecution, Applicant amends claims 1, 9, 20, 35 herein. 
Applicant amends claims to clarify claimed features. Also, some amendments 
consist of dependent claims being rolled up into the base claim. For example, as 
amended herein, claim 1 includes the content of both dependent claims 2 and 6. 

[0006] Also, the preamble of some claims are amended to clarify their 
meaning and to remove a term which was introduced without an antecedent 
basis. 

[0007] Such amendments are made to expedite prosecution and to more 
quickly identif/ allowable subject matter. Such amendments are merely intended 
to clarify the claimed features, and should not be construed as further limiting 
the claimed invention in response to the cited references. 
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Substantive Matters 

Claim Rejections under 102 and 103 

[0008] Claims 1-37 are rejected under 35 U.S.C. § 102 or § 103. 

[0009] The Examiner rejects claims 1-3, 6-8, 11-15, and 18-19 under §102. 
For the reasons set forth below, the Examiner has not shown that cited 
references anticipate the rejected claims. 

[0010] In addition, the Examiner rejects claims 4-5, 9-10, 16-17, and 20-37 
under §103. For the reasons set forth below, the Examiner has not made a 
prima facia case showing that the rejected claims are obvious. 

[0011] Accordingly, Applicant respectfully requests that the § 102 and § 103 
rejections be withdrawn and the case be passed along to issuance. 

[0012] The Examiner's rejections are based upon the following references 
alone and in combination: 

• Tsujii; Tsujii, Shigeo et al. "An ID-Based Cryptosystem Based on 
the Discrete Logarithm Problem." lEE (1989); 

• Clien: Chen, Liwung et al. "Identity Based Authenticated Key 
Agreement Protocols from Pairings." Proceedings of the 16**^ IEEE 
Computer Security Foundations Workshop (2003). 
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Overview of the Application 

[0013] Short digital signatures are used in environments with bandwidth 
constraints and when users manually enter signatures. The shorter a signature, 
the easier it is for a third party to successfully break it through cryptanalysis. 
The Application describes strong cryptographic techniques for increasing the 
security of a short signature. As described, short digital ciphers (e.g., signatures) 
are generated and such ciphers correspond to an input message by mapping the 
message to a point on an elliptic curve and then scaling this point, based upon a 
private key, to generate another point. 

[0014] On page 15, line 20 through page 16, line 2, the Application 
describes one aspect like this: 

Roughly speaking, the exemplary short signature generator forges short 
digital ciphers (i.e., signatures) by computing n discrete logs of aJ',...,a„P base 
P , where « is a positive integer, f is a point on an elliptic ciu^ve and a public key, 
and the scaling factors a,- are an unknown private key. This adds a factor of \fn to 
the security of the system (i.e. the required computational effort to break the 
system) without affecting the signature length. 

[0015] The Application also describes techniques for verification of such 
generated ciphers by comparing pairing values for two pairs of points. 
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Cited References 

[0016] The Examiner cites Tsujii as its primary references in its anticipation- 
and obviousness-based rejections. The Examiner cites Chen as its secondary 
reference in its obviousness-based rejections. 



Tsuiii 

[0017] A secure and reliable data transmission in large networks is still one 
of the important issues. Tsujii discloses an ID-based cryptosystem based on the 

discrete logarithm, problem which uses EIGamal's public key cryptosystem. 

Section II @page no. 467 explains the EIGamal's public-key cryptosystem 
which is as follows: 

< PMblic-'Key > 

< Se«)(«t-K;ey > 

5 ; a const Bmt mjrober (0 g ? .g p — 2>, 

< ErtcryptLon > 

Le» m{0 g m ^ j0 - I ) be a Htessage lo be tfaissnat- 
ted. The sendei choose a raBdjani nuinber riJS^ ^ r ^ p 
- 2) »nd iXMnputes (fee cij^er teset C in the fc»ltowiftg: 

c « Cc„ e,) . ( 0 

^, «^ «'(n»od/»), {2} 

< Decrypiion > 
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The implementation of the ID-based cryptosystem involves certain 
preparations for the centre and each entity. This includes generating the centre's secret 
information and each entity's secret key. (Tsuji- section III) For centre's secret 
information, the centre itself chooses an arbitrary large primary number p, e.g., | p | = 
512 (|p| denotes the number of bits in the binary representation for p), and also 
generates an n-dimensional vector a over Zp.i which satisfies the following: 

« " J 0. (10) 

and stores it as the centre's secret information. 

Each entity i's secret key Si is produced by an inner product of a 
(the centre's secret information) and EIDi (the entity i's extended id). 
' mBiitm4p~ I) 

i ^^^^ 

An arbitrary entity's secret key, e.g., an entity k's secret key Sk , can be 
decided by computing Sk = EIDk * a (mod q ). Here, a is not necessarily identical to the 
original entity k's secret key Sk. The difference between Sk and Sk is some integral 
multiple of q. Hence, the original entity k's secret key Sk can be computed in at the most 
c trials where p-1 = 2*" * q and c « | p | . 

Section B @page 471 of the reference talks about the enhancement of 
the security and the processing cost for the system. The centre partitions a 512- 
dimensional binary vector B into 256 segments, every two bits such as 
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B ^ tbu hi h* hf * * ' ; ha* hit} 

Then, ti?e ceiiief deHnes aC*i#) i t S i S 2S<S; A * ® 
{0, 1 1 ) aj^rsfpjia^eiy. computes A (/;/*>( ! g j s 256; 

for each segj, at^d pul^iishes. the table iacliidkg every h(i; 
«tt(lty*s seem teey by 

^ &eg,;) («iod p ™ 1). (55) 

where EID* ts paitUbne4 imo 256 segtwests, evei^' tiA^o 
bits, mch m EID| (sc$^i, mgti^ • ■ * . seg^j*). Theft, 
«stl:£«f dblflMes k to «£i.ch mttiy ttmxagh 3 highly 
ssfittFB chuniui^. T«fe!e 1 gives m tmmph «f /*jt. 

TABLi I 



Hh mi « 5 H2i m « Hti 06) « 4 *{44<»j 

AtJlSliii^i 13 ftt2;«M«J7 *a;»13t-23 J!t{4jOS>-2 

*(l:iO>*»12 A?3n6j-I5 *<45 I»J » 8 

*tl;nj^9 A(3;*n»ll *a;(i)«fS A<4;Jl>«ai 



C/7e/7 

[0018] Chen's paper investigates issues related to identity based 
authentication l<ey agreement protocols in the Deffie-Hellman family enabled by 
the Weil or Tate pairings. Such issues include how to make protocols efficient, 
avoiding key escrow by a trust authority (TA) that issues identity based private 
keys for users, and to allow users to use different TAs. 

[0019] Paragraph 1 at page 3 talks about two groups Gl and G2 of primary 
order q. Gl, with an additive notation, denotes the group of points on an elliptic 
curve; and G2, with a multiplicative notation, denotes a subgroup of the 
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multiplicative group of finite field. A pairing is a computational bilinear map 
between these two groups. 



Anticipation Reiections 

[0020] Applicant submits that the anticipation rejections are not valid 

because, for each rejected claim, no single reference discloses each and every 
element of that rejected claim. ^ Furthermore, the elements disclosed in the 
single reference are not arranged in the manner recited by each rejected claim. ^ 

Based upon Tsuiii 

[0021] The Examiner rejects claims 1-3, 6-8, 11-15, and 18-19 under 35 
U.S.C. § 102(b) as being anticipated by Tsujii. Applicant respectfully traverses 
the rejections of these claims. Based on the reasons given below, Applicant asks 
the Examiner to withdraw the rejection of these claims. 



^ "A claim is anticipated only if each and every element as set forth in the claim is found, either expressly or 
inherently described, in a single prior art reference." Verdegaal Bros. v. Union Oil Co. of California, 814 F.2d 628, 
631, 2 USPQ2d 1051, 1053 (Fed. Cir. 1987); also see MPEP §2131. 

^ See In re Bond, 910 F.2d 831, 15 USPQ2d 1566 (Fed. Cir. 1990). 
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Independent Claim 1 



[0022] The Examiner indicates (Action, p. 2) the following with regard to 
this claim: 

Rq, .rcf ri<iim 1 1 \ I'^x^m iit.c^o«;es tbt: obtaining me^s^^^^t M see Page 467 ll Ga-T) u% 

prt,deh]U J n.st t 4'-hjng 'u i n ;t » * t jww^gc see Fj.gt 46^5 '* S\ u'l^u^. m;. kt / 
ot ^^ -^Zxoxdm^^ e ssnth cqu j< lor V„ , , v,c«, rrod m see l*ag«> 468 tt-ern ' ^ sdiK sn^- j. 'vi^'n m f r 
S sn accotdviCf wnjb t^|tsiUun S - a H^(M^, whert Hj{^.lJ ts i prt-tfefmLd si havlvng 
fo^icdon see Page 470"(39)< 

[0023] As previous written, claims 1 and 13 cover similar content, but 
different statutory subject matter. However, claim 1 is amended and now differs 
from claim 13. In particular, the amendments include clarification of some 
aspects and inclusion of the content of both dependent claims 2 and 6. 

[0024] Applicant submits that Tsujii does not anticipate this claim because it 
does not show or disclose, at least, the following features as recited in this claim 
(with emphasis added): 
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• defining a vector v to be Vu...^Vn based upon a predefined first 
hashing function of the message M; 

• calculating a private l<ey o [alpha] in accordance with this equation 
a = ^ v^a, modm , where /II is an order of torsion points; 

• producing a signature 5 in accordance with this equation: 5 = oHziM), 
where /i2{M) is a predefined second hashing function of the message A/, 
wherein the predefined first hashing function differs from the 
predefined second hashing function and wherein the signature 5 is 
represented by a number of bits; 

• truncating a specific number of bits off of signature S; 

• after the truncating, indicating a message-and -signature 
pair (>»^ 5) based, at least in part, on the obtaining, defining, 
calculating, or producing 

[0025] Instead of disclosing "defining a vector vto be vu...^Vn based upon 
a predefined first hashing function of the message," Tsujii shows 
computing of its vector a as a function of M/and p, where neither j4^nor p is "the 
message/' as recited in the claim as being the basis for defining the vector. The 
following selected portions for Tsujii supports the Applicant's position: 

«^ - #|w(iMid^ - I) (I ^ I g m% (III 
(Tsujii, p. 468, regarding equations (12) and (13)) 
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^= (itiodp} (0 i 5 ^ /J - 2). 

(Tsujii, p. 467, under "< Public-Key > heading) 

[0026] Notice that tvis a value that "satisfies GCD (m^ p-1) =1 and that p is 
a "large prime number." Notice neither one of them are the message of Tsujii 
defined under the "< Encryption >" heading on p. 467: 

Consequently, Tsujii fails to disclose, "defining a vector vto be vu...,,Vn based 
upon a predefined first liasliing function of tlie message," as recited in 
the claim. 

[0027] Furthermore, instead of disclosing "calculating a private key a 

a = ^v,.«,.modw 

[alpha] in accordance with this equation ^ i /' Tsujii shows a 

calculation of a secret key s,- by a function of /and p, where neither / nor p is 
alpha nor the message (M), as recited in the claim as being the part of the 
claimed equation. Moreover, Tsujii fails to disclose use of m, where "/?? is an 
order of torsion points," as recited in the claim. 
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[0028] The following selected portions for Tsujii supports the Applicant's 
position: 

, iUt^ osnier's seem ifilwsiaikp) ttfea tiiti^ r$ 

(Tsujii, p. 468, regarding equation (16)) 

f : ^ gtiii^ml^r of 2,, ^-^^-^^ f 0 } 

(iit^dpi CO k s :g p - 2). 

(Tsujii, p. 467, under "< Public-Key > heading) 

[0029] Accordingly, Tsujii fails to disclose "defining a vector vto be Vu-v^n 
based upon a predefined first hashing function of the message." 

[0030] Furthermore, instead of disclosing "producing a signature S in 
accordance with this equation: S = aH2(M), where H2(M) is a predefined second 
hashing function of the message," Tsujii shows a computation based upon the 
"Carmichael function of N" (see M.R. Schroeder, "Number theory in science and 
communication," Springer Series in Information Sciences, 1986). 
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[0031] The following selected portions for Tsujii supports the Applicant's 
position: 



If J # lie f * 1 1 fiaMiii ctj^ m i 
of X(iV), ai^d they ca^ liita ^l^e ficWi^^tic^^n of N [ISJ. 
^milM ^i^eil^c^ With Mtek i b ap^ltcabk; JieiK«, 

O 



(Tsujii, p. 469, equation (39) is what the Examiner indicates discloses this feature 
of the claims) 

% litis oiiiroT diiiife, itiij ly^l^TO in Section II b ^ligW^ 

kiN)h the Carmtekiel fenctloi of ^1 f 161 ijid i ftfi- 
^^t^r III 2^ f 0 1, b ftplic^ % f \ gsni^mi^r cif th^ 

(Tsujii, p. 470, under "Modified System and Security" heading) 
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[0032] This equation (39) cited by the Examiner is not a "hashing function 
of the message." Consequently, Tsujii fails to disclose "producing a signature S 
in accordance with this equation: S = aH2(M), where HzCM) is a predefined 
second hashing function of the message" 

[0033] Further still, the Examiner has not shown where the reference shows 
(as recited in the claim): 

• "the predefined first hashing function [being different] from the predefined 
second hashing function" 

• "truncating a specific number of bits off of signature S" and doing so next 
"indicating" 

• "indicating a message-and-signature pair (M, S)" 

[0034] Accordingly, Tsujii does not disclose all of the claimed elements and 
features of this claim. Accordingly, Applicant asks the Examiner to withdraw the 
rejection of this claim. 



Dependent Claims 2-8 

[0035] Claims 2 and 6 are canceled because their content is now rolled up 
into claim 1, as amended. 

[0036] For the remaining claims, these claims ultimately depend upon 
independent claim 1. As discussed above, claim 1 is allowable. It is axiomatic 
that any dependent claim, which depends from an allowable base claim, is also 
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allowable. Additionally, some or all of these claims may also be allowable for 
additional independent reasons. 



Independent Claim 13 

[0037] The Examiner indicates (Action, p. 2) the following with regard to 
this claim: 

Public k«) Crj']: tos)'Sts;m-<Fi>cr) plaon"^. dcfinang a vector to v, v,. b^^^eri upon ^ 
prcdefmcJ first h^«chmg his^ction of he messa^ Pa^e 46^ -»{l2i; cAlcula^sng \ prsviitL key 

> sn ui, cf^^v-^^k^ h 5 c * ibo* S " at Hj(M), -where Hj(M^ -i predelir^ed >^e!L^J!, d h^h^n^ 
luncden §«e Page 470-(39), 

[0038] Applicant submits that Tsujii does not anticipate this claim because it 
does not show or disclose, at least, the following features as recited in this claim 
(with emphasis added): 
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• defining a vector i^to be vi^...^Vn based upon a predefined first 
hashing function of the message; 

• calculating a private key o [alpha] in accordance with this 

equation a = ^v^a^ modm ; 

• producing a signature 5 in accordance with this equation: 5 = 
oH2{M), where HziM) is a predefined second hashing function of the 
message 

[0039] Instead of disclosing "defining a vector vto be v^.-yVn based upon 
a predefined first hashing function of the message/' Tsujii shows 
computing of its vector ^ as a function of tyand p, where neither nor p is "the 
message/' as recited in the claim as being the basis for defining the vector. The 
following selected portions for Tsujii supports the Applicant's position: 

m - (mMp n Ci i I ^ ^% (m 



(Tsujii, p. 468, regarding equations (12) and (13)) 
(Tsujii, p. 467, under "< Public-Key > heading) 
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[0040] Notice that jvis a value that "satisfies GCD (m^ p-1) =1 and that p is 
a "large prime number." Notice neither one of them are the message of Tsujii 
defined under the "<Encryption>" heading on p. 467: 

Lci i^CO s ^ ^ 1 ) ^ ^ iiim^^ge ID be immit- 
- 2 ) aid. msfi|»iiies tl^ ei|^^ tE:iir C In ibe foibwii^: 

Consequently, Tsujii fails to disclose, "defining a vector vto be vi,...,Vn based 
upon a predefined first liasliing function of tlie message." 

[0041] Furthermore, instead of disclosing "calculating a private key a 

[alpha] in accordance with this equation =i /' Tsujii shows a 

calculation of a secret key s,- by a function of /and p, where neither / nor p is ai 
nor the message (M), as recited in the claim as being the part of the claimed 
equation. 

[0042] The following selected portions for Tsujii supports the Applicant's 
position: 

palei tha eMity T!^ ^^icn^t key fey the i^ipcr pitiduct ctf «i 
rtei^b* IP; C?||. 

% = t ^ ffl^C^ F ™ 
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(Tsujii, p. 468, regarding equation (16)) 

1 iiii^ pririw nninter , 

f imMp}{Q ^ s ^ p - 1). 

(Tsujii, p. 467, under "< Public-Key > heading) 

[0043] Accordingly, Tsujii fails to disclose "defining a vector vto be Vu-v^n 
based upon a predefined first liasliing function of tlie message." 

[0044] Furthermore, instead of disclosing "producing a signature S in 
accordance with this equation: S = aH2(M), where H2(M) is a predefined second 
hashing function of tlie message," Tsujii shows a computation based upon the 
"Carmichael function of N" (see M.R. Schroeder, "Number theory in science and 
communication," Springer Series in Information Sciences, 1986). 

[0045] The following selected portions for Tsujii supports the Applicant's 
position: 
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€%m% min ^ I HIiineMi'on^i veetsir t aver the int^ier 
S c^Em^ - (3?) 

S rj^^i^^fmodXC/^)}, (38) 

^ S c,^^-JMM). (39) 

If ^ # 0, Che i^f U etartties c^r h^w ^rt mtt^gt^s mulupic 
of H^'h ^nd thfiy cai^ fimt stie tew?jitiO>fi of N m]. 

Ills ctnlM'f mfo^Btikm mn b)^(n-t 1} 

O 



(Tsujii, p. 469, equation (39) is what the Examiner indicates discloses this feature 
of the claim) 

Ibis oiiiior diinf the system in ^ctioji II i.^ siigkl^ 
mdii^ si^ch - 1) ^ lepkc^ by X(#) wb@r^ 

XCM) k this CarmiirfcEd ftmciioi of mi m4 t f^^ 

ipyltipliolW iio^p in Z^*. Porlte moctiied mtem^ C<^- 

(Tsujii, p. 470, under "Modified System and Security" heading) 

[0046] This equation (39) cited by the Examiner is not a "hashing function 
of the message/' Consequently, Tsujii fails to disclose "producing a signature S 
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in accordance with this equation: S = aH2(l^1), where H2(l^) is a predefined 
second hashing function of the message" 

[0047] Accordingly, Tsujii does not disclose all of the claimed elements and 
features of this claim. Accordingly, Applicant asks the Examiner to withdraw the 
rejection of this claim. 

Dependent Claims 14-19 

[0048] These claims ultimately depend upon independent claim 13. As 
discussed above, claim 13 is allowable. It is axiomatic that any dependent 
claim, which depends from an allowable base claim, is also allowable. 
Additionally, some or all of these claims may also be allowable for additional 
independent reasons. 



Dependent Claims 11-12 

[0049] According to the Action, claims 11 and 12 are rejected based upon 
anticipation (i.e., § 102). However, claims 11 and 12 are dependent claims, 
which depend from independent claim 9. According to this Action, claim 9 is 
rejected as being unpatenable under § 103 (i.e., obvious) based upon a 
combination of references. 

[0050] Applicant is unsure how dependent claims, which are presumptively 
narrower than independent claim, would be rejected as being anticipated by one 
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reference while their base independent claim is rejected as being obvious based 
upon a combination of references. 

[0051] In this confusion, Applicant will treat claims 11-12 as being rejected 
as being obvious based upon the same combination of references as its base 
independent claim (claim 9). 
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Obviousness Reiections 



Lack of Prima Facie Case of Obviousness fMPEP S 21421 

[0052] Applicant disagrees witli the Examiner's obviousness rejections. 

Arguments presented herein point to various aspects of the record to 
demonstrate that not all of the criteria set forth for making a prima facie case 
have been met. 



Based upon Tsuiii and Chen 

[0053] The Examiner rejects claims 4-5, 9-10, 16-17, and 20-37 under 35 
U.S.C. § 103(a) as being unpatentable over Tsujii in view of Chen. Applicant 
respectfully traverses the rejection of these claims and asks the Examiner to 
withdraw the rejection of these claims. 

[0054] Claims 4-5 and 16-17 ultimately depend upon independent claims 1 
and 13. As discussed above, claims 1 and 13 are allowable. It is axiomatic that 
any dependent claim, which depends from an allowable base claim, is also 
allowable. Additionally, some or all of these claims may also be allowable for 
additional independent reasons. 
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Claim 4-5, 9-10, 16-17, 22, and 30 



[0055] One pp. 2-4 of the Action, the Examiner offers a blanket rejection of 
claims 4-5, 9-10, 16-17, 22, and 30 (of which claim 9 is on the only independent 
claim). The following is the complete text of the Examiners rejection of these 
claims: 

. Kegardmg Claim 4-5, 9-19;!6-l?; 1% SO.Tsupi dkc:]o$e dUcrete lop of points oo ati 
elliptic cyn.'e and tatte~wdl pairing^. Ho^^evcfj Chen dkdos^ the dJscrssisi of points 0:?i 

m dlipdc cur%^e tnd tate-weil parings see 1 141[ ''Suppose %%%% there sre. . 

[0056] Applicant submits that this rejection is confusing and lacking in 
support. 

[0057] Initially, the Examiner says that Tsujii discloses "the discrete logs of 
points on elliptic curve and tate-weil pairing." However, the Examiner provides 
support for this assertion. No portion or section of Tsujii is pointed towards as 
supporting the Examiner's assertion. Therefore, the Applicant respectfully 
requests that next Action— which is expected to be non-Final— provide support 
for this assertion. 

[0058] Next, the Examiner says that Chen also discloses "the discrete logs 
of points on elliptic curve and tate-weil pairing." It is unclear as to why the 
Examiner relies upon both references for suggesting and teaching the same 
information. Perhaps, the Examiner meant that Tsujii did NOT disclose it but 
Chen did. 
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[0059] To support the assertion that Chen discloses the claim language, the 
Examiner points to "Page 9 1411 "Suppose that there are...", presumably of Chen. 
This is what that paragraph says: 



TAi and TAi; they e^cli Ha^vf ^ pjfeUo^fival^ tey 
tecommiin^rd b)^ itilerf^atioti^il si^i^dard body. 

[0060] Applicant is at a lost at understanding how the Examiner sees the 
claim language of claims 4-5, 9-10, 16-17, 22, and 30 in the above paragraph of 
Chen. For the reader to better compare the cited language of Chen, here is the 
claim language of some of the claims being rejected based upon Chen: 

9. A computer-readable medium ... comprising: 

choosing n discrete logs of a^P,...,a^P base P, where n Is a positive 
Integer, P Is a point on an elliptic curve and a public key, and a,- Is a scaling 
factor and a private key; ... 

10. A medium as recited In claim 9, wherein a point Is of order and where 
denotes a Tate or Well or Squared Tate or Squared Well Pairing, where = and 
where q Is a prime power. 

[0061] Other than a few minor superficial terms (e.g., P, public key, private 
key). The Examiner has not identified where any cited reference discloses 
anything found in these claims. 

[0062] Accordingly, the Examiner has failed to establish its prima facie case 
for the obviousness rejection. Furthermore, the cited references (alone or in 

Serial No.: 10/804,835 . ^ 

Atty Docket No.: MS1-1286US "38- ls--X---^H VlV^"^* ^s-^ssSs-yK*-*!!!,--^*!!^ 

Atty/Agent: Kasey C. Christie , „^ 



combination) fail to disclose, teach, or suggest all of the elements/features found 
in these claims. Applicant asks the Examiner to withdraw the rejections. 



No Reason to Combine References 

[0063] Applicant submits that Examiner has not identified a valid reason 
that would have led one of ordinary skill in the art at the time of the invention 
(hereinafter, "OOSA") to combine the disclosures of the cited references in the 
manner claimed. 

[0064] Here is the Examiner's state reason for combining the teachings of 
the references (p. 4 of the Action): 

m eliipdc and tate-wesl pairki^ see Page 9 14^ "Suppose that: there mt..,*Mtis-'«dil be 
obvious to <me banng osdibarjr daR b the art at the time of slssj im'entiors to indude the 
di$cr-iste lop 0^ pomts m m ellipttc curve tate-x^^eil paMfigjS hi iawafeori of T^jM m 
order to wm<|ae sessbn kejx 

[0065] Applicant is unsure and unclear on how to interpret this reasoning. 
What does it mean to "unique session keys?" Why is that desirable? More 
importantly, the Examiner does not point out the source of the reasons to 
combine the teachings. Why would OOSA look at these two references? Why 
would it be logical for OOSA to look to one reference to solve the problems 
related to the other reference? The Examiner does not address these questions 
or issues. 
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[0066] Therefore, there is no valid reason that would have led OOSA to 

combine the disclosures of the cited references in the manner claimed. 
Accordingly, the Applicant therefore respectfully asks the Examiner to withdraw 
the rejection of these claims. 

[0067] As shown above, the combination of Chen and Tsujii does not 
disclose all of the claimed elements and features of these claims. Accordingly, 
Applicant asks the Examiner to withdraw the rejection of this claim. 



Dependent Claims 10-12 

[0068] These claims ultimately depend upon independent claim 9. As 
discussed above, claim 9 is allowable. It is axiomatic that any dependent claim, 
which depends from an allowable base claim, is also allowable. Additionally, 
some or all of these claims may also be allowable for additional independent 
reasons. 



Claim 20. 27. 28. 35. and 37 

[0069] One pp. 4 of the Action, the Examiner offers a blanket rejection of 
claims 20, 27, 28, 35, and 37 (of which claims 20, 28, and 35 are the 
independent claims). The following is the complete text of the Examiner's 
rejection of these claims: 
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Regarding CUim 20, 27, 28. 37, 1'-^ufu du^close^ the ohi^^^if^ng messsgt- M md 
^igT3,imre;iM,S) seo P<?feC 471- (55) il i^i'i T ' ( m -nf^ {' jl K k> , . c^M ^ 

Oit 1-h*.' T^t^SAgi. sec Pago ^<j>5 ^12)', i:A\iUm% :i prsv.uc U-y -x s^n \ccord^ ce w^'dii es^iu^itson 

Eii'iii ^•'"A '^^^ 1^*^^ ^^^^ d£53clos« die cakuLtHfig the poau 

on tWipnc t:un,'e^ con-!;p-.inng Dl:'p-jsr (P, S) and pasr (Q^ Hj(M;) md md^aitirsg results of 
c.^n!r,auuj, ^v.v> \i r, C;ht.ti (.'i^dasi-'S the point un ij^-i f V^-^ it'r^-f'(V ^^^nip ^rng of 

(l^ > Mid piiir ;Q, i ii^M)) jmd indicsnng results or comp.i^sag t-ct (l\igc l| '^Ai t:sc 
coniiu'sbn, . ,"}. k would be obyious to one having ordmajry skill m the Art at rfte tsme of the 
snven^on to inckid<r th«^ calailating Hue pam asi elhptfc: o^rs-e, contpArsng of pssr (1^, S) 
vind ps^ir (Q Mj^M}) ^nd ir^diCiftng re^uffc* o£ comp^inng m the mvenrifvti of 1 sufii !t\ der to 
h,i\i. 15 I srl'^f . ircn $yso?m/kejf 'i^errifscaiioa systurs as taughtm Chen see r*iage 10 9| 
'"The rsscd-iod used . . S\ 

[0070] Neither reference discloses: "obtaining an input message-and- 
signature pair {M, S)." The Examiner indicates that the following text from Tsujii 
discloses this claim language: 
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for each aeg^H p^blisliesi, tli^ uNc in^l^dirtf ev^ry 
jk } XQ ill «iiti^^. Furthemicift^. the center c^pipitef «h 

dcpemtmg on ihe emiiy extended idemiry, E!P|^ 

[0071] Where is the 'Nnput message-and-signature pair (|V|,S)?" This is the 
text cited by the Examiner as that which discloses, teaches, or suggests the 
obtaining of an "input message-and-signature pair (l^,S)." Applicant submits 
that this cited text and all of Tsujii for that matter is silent on this claimed 
feature. 

[0072] Instead of disclosing "defining a vector i/to be Vu...,Vn based upon 
a predeHned first hashing function of the message/' Tsujii shows 
computing of its vector a as a function of and p, where neither nor p is "the 
message," as recited in the claim as being the basis for defining the vector. The 
following selected portions for Tsujii supports the Applicant's position: 
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(Tsujii, p. 468, regarding equations (12) and (13)) 



1 iiii^ pririw nninter , 

f (mM^im m ^ ^ p - 

(Tsujii, p. 467, under "< Public-Key > heading) 

[0073] Notice that is a value that "satisfies GCD (m^ p-1) =1 and that p is 
a "large prime number." Notice neither one of them are the message of Tsujii 
defined under the "< Encryption >" heading on p. 467: 

ted- Tie mMtt €hmm^ n mti^m tiyinfecr i^CO S r ^ p 

Consequently, Tsujii fails to disclose "defining a vector vto be vu...^Vn based 
upon a predefined first liasliing function of tlie message." 

[0074] Furthermore, neither Chen nor Tsujii disclose: 

• calculating a point Q on an elliptic curve in accordance with this 

equation: Q = Y,"i^iQif 

• comparing pairing outputs of a pair (^ 5) and a pair (G HiW), 
where is a predefined second hashing function of A/ and P 
is a point on the elliptic curve; [claims 20 and 28] 

• comparing pairing outputs of a pair (^ 5) and a pair (G M(/^)^ 
where l-h.{M) is a predefined second hashing function of A/ and P 
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is a point on the elliptic curve and |a is an integer in a defined 
range; [claim 35] 

[0075] Accordingly, the Examiner has failed to establish its prima facie case 
for the obviousness rejection. Furthermore, the cited references (alone or in 
combination) fail to disclose, teach, or suggest all of the elements/features found 
in these claims. Applicant asks the Examiner to withdraw the rejections. 

No Reason to Combine References 

[0076] Applicant submits that Examiner has not identified a valid reason 
that would have led one of ordinary skill in the art at the time of the invention 
(hereinafter, "OOSA") to combine the disclosures of the cited references in the 
manner claimed. 

[0077] Here is the Examiner's state reason for combining the teachings of 
the references (p. 4 of the Action): 

C\ ncii. ^(on ") It wauld bt ab\ ous to one having ofdsaaiy ski!! 1 1 the art at tl\e taite ai 
sa^ r rif^ uludi t^u ^ u viUtunf t-^e pomt o 1 a?^ elliptic cxin e o< ir>n<' | ; r I 

**The meiiod used , 

[0078] Applicant submits that this reasoning is invalid on its face. Based 
upon the reasoning given above, it is the Examiner's position that OOSA would 
look towards the teaching of Tsujii "in order to have an authentication 
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system/key verification system as taught in Chen." However, by the Examiner's 
own admission, Chen already has the very system that the teaching of Tsujii 
somehow enables Chen to have. Applicant is quite confused as to how Tsujii's 
teaching helps Chen possess (i.e., "have") something that is already possesses. 

[0079] Furthermore, the Examiner does not point out the source of the 
reasons to combine the teachings. Why would OOSA look at these two 
references? Why would it be logical for OOSA to look to one reference to solve 
the problems related to the other reference? The Examiner does not address 
these questions or issues. 

[0080] Therefore, there is no valid reason that would have led OOSA to 
combine the disclosures of the cited references in the manner claimed. 
Accordingly, the Applicant therefore respectfully asks the Examiner to withdraw 
the rejection of these claims. 

[0081] As shown above, the combination of Chen and Tsujii does not 
disclose all of the claimed elements and features of these claims. Accordingly, 
Applicant asks the Examiner to withdraw the rejection of this claim. 



Dependent Claims 21, 23-26, 29, 31-34, and 36 

[0082] These claims ultimately depend upon independent claims 20, 28, 
and 35. As discussed above, claims 20, 28, and 35 are allowable. It is 
axiomatic that any dependent claim, which depends from an allowable base 



Serial No.: 10/804,835 , ^ 

Atty Docket No.: MS1-1286US "■^5- ls--X---^H VlV^"^* ^s-^ssSs-y 

Atty/Agent: Kasey C. Christie 4v.v.i.v.\v^«~ . ^^^ 



claim, is also allowable. Additionally, some or all of these claims may also be 
allowable for additional independent reasons. 

Dependent Claims 

[0083] In addition to its own merits, each dependent claim is allowable for 

the same reasons that its base claim is allowable. Applicant requests that the 
Examiner withdraw the rejection of each dependent claim where its base claim is 
allowable. 
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Conclusion 



[0084] All pending claims are in condition for allowance. Applicant 
respectfully requests reconsideration and prompt issuance of the application. If 
any issues remain that prevent issuance of this application, the Examiner is 
urged to contact me before issuing a subsequent Action. Please call or 
email me or my assistant at your convenience. 



Respectfully Submitted, 

Lee & Hayes, PLLC 
Representatives for Applicant 

/kaseychristie40559/ Dated: 9/17/2008 

Kasey C. Christie (kasey@leehayes.com; x232) 
Registration No. 40559 
Customer No. 22801 

Telephone: (509) 324-9256 
Facsimile: (509) 323-8979 
www.ieehayes.com 
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